EtwpInitializeProviderInfoBuffer
VOID __stdcall EtwpInitializeProviderInfoBuffer(
_WMI_LOGGER_CONTEXT *LoggerContext,
_WMI_BUFFER_HEADER *Buffer,
UINT64 BufferSize){
int v3;
__int64 v6;
v3 = BufferSize;
EtwpInitializeBufferHeader(LoggerContext, Buffer);
*(_DWORD *)Buffer = v3;
EtwpResetBufferHeader(Buffer, 7u);
*((_DWORD *)Buffer + 11) = 3;
*((_WORD *)Buffer + 26) = 1;
*(_ETW_REF_CLOCK *)((char *)Buffer + 56) = LoggerContext->ReferenceTime;
v6 = *((_QWORD *)Buffer + 4) ^ (*((_DWORD *)Buffer + 8) ^ LoggerContext->ClockType) & 7;
*((_QWORD *)Buffer + 4) = v6;
switch( LoggerContext->ClockType )
{
case 1u:
goto LABEL_2;
case 3u:
*((_QWORD *)Buffer + 4) = v6 & 7 | (8i64 * *(&ExBootDevicesRemovedEvent + 381));
return;
case 4u:
LABEL_2:
*((_QWORD *)Buffer + 4) = (8i64 * *(&ExBootDevicesRemovedEvent + 189)) | v6 & 7;
break;
}
}Referenced by:
EtwpRealtimeNotifyConsumers
EtwpSendDbgId